RHSA-2022:6507CriticalCVSS 10.0

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5.2 security fixes and bug fixes

Published
September 13, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2022-31129 →CVE-2022-36067 →

📋 Description

CVE-2022-31129 — moment: inefficient parsing algorithm resulting in DoS CVE-2022-36067 — vm2: Sandbox Escape in vm2

🎯 Affected products200

  • Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:02050ce97c1776f490b0bb2a120c507152d58bc9ca14ef595c64461b2e1689aa_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:b3b740da052f2153ea2004d716d791de269400d7079037acc28b7ca3951f19bf_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:e25600720968b5fb633e8caec9fe648feebd498c94d5ea6dc87ace1bd293df8b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:f245bcab3e22e3354d9945eacea687f85e1e913269dfbc77fa84e43e20b4eb43_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:0c8d97841e4355340cc9a277cfc9c4a11b423799643cdc029be954b7d41e2d6b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:0f11d6673c31570b1ff04cd60efd2a76bd2ec4d597b68ab4ff749c74615adf28_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:1a684547abdcefca7d30261d7c9e6e148bd46a80fb482df276e1013dfb040e0f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:b2782113404ab02ccabf81a8b095709e6a110cf2c4e095c104452e39ad13ab16_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:3d4e502f6fbfdab0cfd445514effb15b9a1217df4865393e8f14083c2001876b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:622de5066c99aec340b98dcc05b2ea41fb256a71c841a36a829cf5c92e190975_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:a6857c25a90fad64dc48cf64cd1bb1a5bb7e260a497b232d694c3e1ced507eca_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:ecf8bb20d50830fd95724e9455c43c79caeb1391b7520afe8a5ca15692e48a65_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:3ba383a7c44edc06731ed19af4a0ee58119c917f1900a9c35ff3d99fd4569923_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:3ba4f63ccdb331f39c7a464e1a4aefc4940822a6a2b9bdab8c1da56d1e6cee85_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:948d0714816ef49b9a9b77fc37c2ce41b58c5228cc029e70427916badaf25016_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:f5ac3c2bdd4043fc8f46477f5396874612e1c88d1031265210dc5343c06d8edb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:135220e6534bc5838011e7b2df998c13b94e065dac72d6a7e28788c36f60f05e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:42fdc004f7be8c8ad6cab3f3bd3318d5bcaff61cf246ab36ec217d63d74c0b0a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:5520ec880dc3eaa57f00b9cdf3d9a4aa780e41419e4a1cbe4496a641fcf7e2c3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:c204734d81913da381edfd28ad348224ef08ce2329806e4f0097695b2b29340b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:47b84175e4c628671a3ba7a38157344f79de93b19e89600618cebd8d4fdc54de_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:6916a5d63d4a1c157086ab5a23bca4faf04964e62cca2818805bf22b9144d76a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:d86f0bff18308721880af004f55b2d5503ab0f851c1e493338685f5e867524b1_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:f6e352c6920120ae43be1d5af8973c75478f0aea503b3b1e344991cf3334eb2f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:0389211ba7b579212893f5e48a2aaf8e8b20bd863d9c625282e540447a25d1af_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:7ac0dbeb859af3c73a8abcdcea3cc049bf6f993134f7a20915f5d0c43fe3a609_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:bfb3889a7f3f29368781d4fab19c4f90dffc6f3e712cc4c9ddca76e1e2c46824_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:e15f397f6ef08b5baacc4b102cb27e0af8155bc89c898043af9c6d5f4dafb68e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:63386ffe1cd1a9a8473704d99b65479d1e45907005f3906fc6dd735b75ac8eba_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • +170 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release, for important instructions about installing this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/install/index#installing Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (27)